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key known only to the user. Kevs haye 
h’ of the encryption. Kev Encryption 
¢ dala for secunty purposes (com. 
rpose is not usually to obscure the 


schemes have two keys. often a public key anda private 
different lengths which are usually related to the “strength 
is one of the most prevalent means of encrypting electront 
pression algorithms also encrypt data, but their primary purpose 's 
meaning of the data bul rather to store or transmit it more efficiently.) Bey 

In general. stronger encryption means longerencryption and/or decryption times, though this 
is not true in every instance, as more efficient algorithms are sometimes devised. Phe choice of 
encryption techniques depends very much on the need for convenience and the required level of 
security. Personal letters are less sensitive than classified government documents, for example, 
and function well with lower levels of encryption and single keys (or no keys). 

Encryption techniques can be symmetric, in which the encryplion and decryption use the 
same key or in which the encryption and decryption processes require about the same amount 
of time, They can also be asymmetric, with different keys, or substantially different eneryp- 
lion/decry ption times. For purposes of security, a method that ts quickly encrypted and slowly 
decry pted is favored for some purposes, For general correspondence, however, slow decryption 
i8 af InconYenience, as are mulliple keys. 

Encryption svstems can be deterministic or nondeterministic, One that generates the same 
result cach time, given the same key, is deterministic and is generally nol as strong as one that 
generates a different result, given the same key. However, true mindommness in computer opera- 
tions is not usually the rule and many systems are deterministic. 

Encryption algorithms can be reversible or irreversible. A reversible scheme is one in which 
data can be recowered back to its unenerypted state. Irreversible schemes cannot be recovered, 
but since they tend to be used as authentication or tamper mechanisms rather than as message 
recovery mechanisms, they are valuable for certain tasks, 

Some specific encryption schemes of interest include 

* AES-1A-8314: Advanced Encryption Standard. A new, stronger encryption algorithm 
intended hy the National institute af Standards and Technology (NIST) Computer 
Security Division to replace DES, The project was initiated in January 1997 as a 
standard laborutery network protocol. Da Vinci is an example of a shareware encry p- 
lion system based upon AES. CipherMax fs an ¢xample of a commercial product that 
provides 256-bit AES encryption. 

APKC (Absolute Public Key Cryptography) - This sysiem was patented in August 2006. 
lt is. a public key cryptographic system and method that offers two-way communica- 
lion security even when a private key is revealed. APKC can support mobile devices 
with low processing power and short keys. The keys have two or more components, 
a random number is bound to cach of the components of the public key, the message 
is. encrypted into the same number of cipher versions as components, and the ciphers 
are delivered to the destination in source routing or hop-by-hop routing with a small 
time gap. All ciphered version are mathematically manipulated ta reconstruct the 
original message. This method prevents an attack al an intermediary [P router because 
all cipher yersions must be available and the original message cannot be obtained even 
if the attacker knows the private key, (U.S. Patent # 7088821 | 
© Blowfish - Designed by Brace Schneier and first presented in 1994, Widespread. 
Standard in OpenBSD. A symmetne block cipher that accepts a variable-length key 
from 32 hits up to a maximum of 448 bits. It can be used as a replacement for DES 
or IDEA. Small block size, good speed, uncomplicated interface. Introduced in Dr. 
Dobb's Journal in Apr, 1994, with source published in Dr. Dobbs Journal, Sept. 1995. 
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